Privacy Policy

1. Introduction & Scope

Card Identifier (“we,” “our,” or “us”) operates the Card Identifier mobile application (also known as RookieScan / Card Identifier) and the website at cardidentifier.app (collectively, the “Service”).

We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect your information when you access or use our mobile applications, websites, APIs, and associated services.

By downloading, accessing, or using Card Identifier, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information in accordance with this policy.

2. Information We Collect

We collect information in several ways depending on how you interact with Card Identifier:

A. Information You Provide Directly

• Account Information: If you create an account to back up and sync your card collection across multiple devices, we collect your email address, display name, and securely hashed authentication credentials.
• Collection & Binder Details: Cards you save to your collection, custom binder folders, purchase prices, acquired dates, physical condition notes, and personal tags you assign.
• Customer Inquiries & Communications: Messages, feedback, card correction reports, or support tickets you send to our support team.

B. Information Collected Automatically

• Card Photos & Image Uploads: Photos taken via your device camera or uploaded from your photo library for card identification and price estimation.
• Device & System Data: Device model, operating system version, unique device identifiers, language settings, time zone, and app version.
• Usage & Performance Metrics: Feature usage, scan volume, anonymous crash logs, app responsiveness, and diagnostic telemetry to help us diagnose issues and optimize speed.
• Web Analytics & Cookies: On our website, we use basic diagnostic tools (such as Microsoft Clarity) and standard cookies to understand visitor navigation and improve site performance.

C. Purchase & Transaction Data

If you purchase premium scan tiers or subscription memberships, transactions are processed directly by the Apple App Store or Google Play Store. We do not store or process your complete credit card numbers or financial account details on our servers. We receive only transaction confirmation tokens, subscription status, and expiration dates.

3. How We Use Information

We use the data we collect solely for legitimate product, service, and security purposes, including:

• AI Card Identification: Extracting visual features, OCR text, set symbols, player names, and card numbers to match your card with our reference database.
• Price & Value Guidance: Estimating realistic market values based on recent completed sales and historical pricing data.
• Multi-Device Collection Sync: Keeping your digital binders and portfolio valuation synchronized across your phone, tablet, and browser.
• AI Model Training & Set Expansion: Anonymized visual card patterns help our computer vision models recognize rare parallels, refractors, and newly released card expansions.
• Customer Support: Troubleshooting scan mismatches, responding to inquiries, and assisting with account recovery.
• Security & Abuse Prevention: Detecting fraudulent use, bot scraping, rate limit violations, or attempts to disrupt service stability.

4. Camera Access & Image Processing

Card Identifier requires camera permission to scan trading cards in real time. We adhere to strict data-minimization practices regarding camera data:

Uploaded or captured card images are transmitted securely via encrypted channels (TLS/HTTPS) to our cloud inference service. Images are analyzed to determine the card’s set, year, card number, and condition factors. You can choose whether to save a thumbnail photo of your card inside your private digital collection.

5. Third-Party Services & Integrations

We work with trusted third-party service providers to deliver hosting, database storage, analytics, and platform integrations:

• Mobile Platform Stores: Apple Inc. (App Store) and Google LLC (Google Play Store) for app distribution and in-app purchase verification.
• Cloud Infrastructure: Secure cloud compute and database hosting providers that comply with SOC 2 and ISO 27001 security standards.
• Analytics & Diagnostics: Anonymous analytics tools (including Microsoft Clarity on web pages) to monitor performance, diagnose crash reports, and improve navigation.
• Market Data Sources: Aggregated secondary market sales data to generate estimated values. No personal user data is ever shared with external market aggregators.

6. Data Security & Storage

We implement robust physical, technical, and administrative security measures to protect your information against unauthorized access, alteration, disclosure, or destruction:

• All data transmitted between your device and our servers is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Stored user database records and authentication credentials are encrypted at rest using AES-256 standards.
• Access to production databases is strictly restricted to authorized engineering personnel using multi-factor authentication.

7. Retention & Account Deletion

We retain your personal information for as long as your account remains active or as needed to provide you with the Service.

Account Deletion: You can request full account and data deletion at any time directly through the mobile app settings or by emailing support@cardidentifier.app. Upon receiving your deletion request, your account credentials, custom binder names, collection items, and associated personal data will be permanently purged from our active databases within 30 days.

Data Portability: You can export your saved collection and estimated portfolio valuations to a CSV spreadsheet file at any time directly in the app.

8. Your Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction (such as the European Economic Area, United Kingdom, or California), you may have statutory privacy rights regarding your personal information:

• Right to Access: You may request a summary of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure (“Right to be Forgotten”): You may request complete deletion of your personal data.
• Right to Data Portability: You may receive your collection data in a structured, commonly used machine-readable format (CSV).
• Right to Opt-Out (CCPA/CPRA): We do not sell or share your personal information with third parties for cross-context behavioral advertising. We do not sell personal data.
• Non-Discrimination: We will never discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, please email us at support@cardidentifier.app with the subject line “Privacy Rights Request”.

9. Children’s Privacy (COPPA Compliance)

Card Identifier is intended for general audiences and collectors. We do not knowingly solicit, collect, or maintain personal information from children under the age of 13 (or under 16 in the EEA/UK) in accordance with the Children’s Online Privacy Protection Act (COPPA).

If we discover that a child under 13 has provided us with personal information without verified parental consent, we will promptly delete that information from our servers. If you believe a child has provided us with personal information, please contact us immediately at support@cardidentifier.app.

10. Updates & Contact Information

We may update this Privacy Policy from time to time to reflect product enhancements, technological changes, or legal requirements. When we make material changes, we will update the “Effective & Last Updated” date at the top of this page and provide notice through the application or website.

If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact us:

• Email: support@cardidentifier.app
• Website: https://cardidentifier.app
• Support Portal: Contact Us Page